From 30daab024ea7b29d22bd1ea2b8e03f45aa8ff8a3 Mon Sep 17 00:00:00 2001
From: Ralph Bean <rbean@redhat.com>
Date: Thu, 16 Feb 2017 14:28:43 -0500
Subject: [PATCH] Handle odd response from OIDC UserInfo.

By surprise, ipsilon handed me back a response with no groups one time.
Not sure why.  But logging here can hopefully help us catch it next
time.
---
 module_build_service/auth.py | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/module_build_service/auth.py b/module_build_service/auth.py
index 2fb2ee35..41448714 100644
--- a/module_build_service/auth.py
+++ b/module_build_service/auth.py
@@ -116,5 +116,11 @@ def get_user(request):
         log.exception(error)
         raise Unauthorized(error)
 
-    groups = set(extended_data['groups'])
+    try:
+        groups = set(extended_data['groups'])
+    except Exception as e:
+        error = "Could not find groups in UserInfo from OIDC %s" % str(e)
+        log.exception(extended_data)
+        raise Unauthorized(error)
+
     return data["username"], groups